moshu-cdp

Warn

Audited by Socket on Aug 30, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/setup-cdp-chrome.js

No direct evidence of classic sabotage/malware (no external C2, no eval/obfuscation, no obvious data exfiltration) is present in this module. However, the code performs high-risk actions: it kills existing Chrome processes and copies sensitive authentication data (Cookies/Login Data/Web Data) into a new debug profile, then launches Chrome with an exposed local CDP port. That combination is powerful and could enable credential theft if this module is part of a larger malicious workflow. Based on this single file, treat it as a high-sensitivity automation/setup script and review surrounding project usage for any reading/exfiltration of the debug profile or CDP session data.

Confidence: 68%Severity: 62%
Audit Metadata
Analyzed At
Aug 30, 2026, 07:30 PM
Package URL
pkg:socket/skills-sh/chained1001%2Fmo-shu%2Fmoshu-cdp%2F@b06e1fa499f5db988e6117e4dcdaa2605a5a9743e969d323b230daf911da47b9
Security Audit — socket — moshu-cdp